Implement CommandOPSEC, at least for `shell` command

[mattreduce]

See https://docs.mythic-c2.net/v/version-2.2/updating/mythic-2.1-greater-than-2.2-updates/agents-2.1.-greater-than-2.2.2#commandopsec